I Am Security

Category: Finjan

  • The impact of just 5 random letters…

    —

    by

    iamit
    in ,

    We have been watching in amazement the impact our latest Malicious Page of the Month had on the industry and media. From coverage at Fox Business News, and the Washington Post, all the way to the more “traditional” security outlets such as SecurityFocus, SC Magazine and bloggers such as Dancho Danchev. The scary thing is the…

  • And the winner for “top virus” of 2007 is…

    —

    by

    iamit
    in ,

    Not a virus. Not even a malware. Neither is the runner up… It’s the method of how malware is populated. According to a report, the most common malware attack in 2007 is the notorious IFRAME. On our monthly and quarterly reports we provided more in-depth analysis of such top-ranking IFRAME and obfuscated code. In Finjan’s…

  • New Orkut worm takes us back in the wayback machine

    —

    by

    iamit
    in ,

    I just love it how old news are recycled with a bit of a flare when they become relevant again. The latest Orkut worm reports talk about the technique that the worm writer has used to distribute its code. Quoting from the original article above: “It then downloads and executes a heavily obfuscated JavaScript”… looking…

  • IFRAME is a security risk???

    —

    by

    iamit
    in ,

    Ok, I have just read the latest in “IFRAME Security” articles and had to write something about it. While going through my usual RSS feeds, I stumbled onto this article, which tries to summarize why “iframes are a security risk”. Not to pick on the specific article, but this is not the first time that…

  • Playing with obfuscators – teaching an old dog new tricks…

    —

    by

    iamit
    in ,

    So our Malicious Page of the Month for September is out now. Going over the details of the document, I wanted to re-visit an old habit I had back in the days of putting code to the test – especially when the code in subject is simple, and has been signature to hell by every…